chore(deps): Pin workflow actions to commit SHAs []

[Alex Olea (linuxoptics)]

• Pin actions to commit SHAs to follow Github best practices.

[Charles Hudson (phobetron)]

Alex Olea (@linuxoptics) is there an automated tool that will scan for these SHAs and determine:

• whether any security issues may be found at a later date related to these SHAs?
• whether they may be safely updated?
• to what new SHAs they could be safely updated?

I'm a bit hesitant to move from version numbers to SHAs as long as simply moving to SHAs may give us a false sense of security and stability unless we also have adequate supporting tooling.